2026-03-02
The anon key is public. The service role key is not.
What Supabase's own docs say about publishable keys, secret keys, and row-level security.
Notes
Short notes on shipping AI-built apps without leaking.
A weekly letter, and starter articles drawn from public sources. Figures are cited, not estimated by us.
2025-11-12
What Escape.tech published about 5,600 vibe-coded apps
The figures from Escape's 2025 report and methodology post, including where the numbers differ.
2025-06-12
What CVE-2025-48757 actually says about Lovable and row-level security
The public CVE record, the researcher's write-up, and the fix that lives in your database policies.